Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa
File:                     394c3db6-6a1b-32c1-9027-a122bb2287b4.roa (raw, json)
Hash identifier:          ZP5neSw41KKzE28os85nBwcGszf3zW0zHqLuYQAeq/M=
Subject key identifier:   93:53:2C:6B:85:3C:05:92:2E:E9:66:38:DA:EE:67:2D:8E:1E:51:44
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D91BFF76BB687A4C62AEA4F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     55201
IP address blocks:        172.120.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:bf:f7:6b:b6:87:a4:c6:2a:ea:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=6451b89c-7277-4444-931f-1d53c8e56eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:7a:8b:35:6e:78:d9:ff:0b:85:09:de:78:
                    20:ce:28:9e:18:d7:8c:b2:71:d8:17:69:23:23:1c:
                    69:89:7c:92:c7:bd:6d:4c:5e:c0:b8:d1:e6:0e:2e:
                    44:b4:bb:8e:b5:e2:13:bb:58:a6:db:dd:59:12:ee:
                    dd:75:cf:34:c6:7c:aa:8a:8a:0a:dd:d5:7e:aa:0c:
                    5d:f9:ce:9e:5b:41:40:65:ef:23:73:c7:85:fc:0b:
                    3e:08:ae:6a:cc:a7:53:f6:02:94:07:71:66:2e:d4:
                    35:74:2f:d7:2a:82:bc:3a:be:00:5b:61:cb:78:fc:
                    ab:05:64:24:b7:cc:69:11:70:c0:28:75:ed:ef:77:
                    67:c2:d4:90:89:ac:63:53:4c:d9:9f:64:da:89:51:
                    f4:c6:a0:f9:ba:8e:ac:02:aa:ca:b5:af:ca:1c:2d:
                    df:54:80:e8:76:99:e1:8a:ec:92:23:aa:b8:0a:71:
                    a9:03:66:25:f0:0c:dc:84:f9:6f:c7:8d:6e:ba:d9:
                    42:b8:9c:3c:2d:b8:52:fd:fa:4f:e3:92:c0:ed:ac:
                    c0:e3:c5:23:85:00:7b:af:e2:44:dc:53:36:c1:b5:
                    f4:fd:b7:76:86:9e:5e:e3:0f:7f:7d:5a:5e:95:01:
                    80:03:d6:ff:79:51:18:d4:ca:63:97:94:3e:11:34:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:2C:6B:85:3C:05:92:2E:E9:66:38:DA:EE:67:2D:8E:1E:51:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:81:a5:7a:09:20:6c:c2:76:92:fc:5f:7a:14:96:c7:76:20:
         0e:92:2a:0c:4c:72:4a:2b:ec:cb:49:44:60:9d:b9:75:db:bd:
         1c:14:43:fa:1c:63:02:c0:a9:5b:9d:03:6c:5b:b9:19:3b:10:
         5f:9b:f6:a2:9c:b8:a5:3e:96:0b:1b:4b:08:77:2e:46:d1:43:
         34:16:54:5d:7a:59:c4:94:57:cd:a5:cd:cb:bb:66:25:97:9d:
         59:b6:02:5a:19:29:13:7e:ac:32:be:9b:73:a3:5a:45:2e:a0:
         b1:04:90:87:23:5f:a7:c8:96:30:cf:80:af:86:ac:8d:d3:57:
         6b:f9:b5:24:0f:ea:39:d0:1c:8a:78:08:54:15:39:fd:20:64:
         28:26:8c:50:d0:94:2f:97:47:66:87:83:a3:37:5f:9e:80:fa:
         cb:5b:5c:d3:d6:0c:6e:b3:4e:04:e4:37:99:0e:14:e4:ff:12:
         70:62:0b:63:72:d5:14:d1:9b:cc:46:db:8d:b7:29:59:e8:a8:
         77:81:59:a7:0f:43:c5:be:4b:a5:12:1e:63:db:17:38:ec:78:
         c6:06:fb:85:2f:8d:e5:c9:53:f1:58:2b:86:22:88:bb:ec:ac:
         bb:6c:e9:ba:15:13:68:f8:b7:ac:43:58:07:0b:53:66:e4:dd:
         a0:a7:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:00:29 2026 by rpki-client